New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
nixos/znc: add proxychains support, maintainers, password tip #86226
base: master
Are you sure you want to change the base?
Conversation
I marked this as stale due to inactivity. → More info |
Still important. Dependent PR merged, this one rebased. |
cc @infinisil |
@@ -255,7 +270,12 @@ in | |||
User = cfg.user; | |||
Group = cfg.group; | |||
Restart = "always"; | |||
ExecStart = "${pkgs.znc}/bin/znc --foreground --datadir ${cfg.dataDir} ${escapeShellArgs cfg.extraFlags}"; | |||
ExecStart = '' | |||
${optionalString cfg.proxychains.enable "${pkgs.proxychains}/bin/proxychains4 "}${pkgs.znc}/bin/znc \ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't really like how non-generic this is. Feels like this should be configurable independently somehow, though I don't really know how that would look
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If we have N different proxy services and M different services, using this pattern means that we need N*M NixOS options to support all combinations
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It's certainly achievable with overlay or setting a wrapper via systemd.services...
but this makes it easy to just enable the support.
I'm not concerned about N*M explosion since this is the only commonly used proxy(/wrapper) with ZNC.
Tangentially related this also needs setting up at least
programs.proxychains.enable = true;
services.tor.client.enable = true;
If you prefer I can drop this from the PR and carry that downstream.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If we have N different proxy services and M different services, using this pattern means that we need N*M NixOS options to support all combinations
I support @infinisil's opinion. This PR is good overall and should be merged IMO.
I marked this as stale due to inactivity. → More info |
I marked this as stale due to inactivity. → More info |
Motivation for this change
Privacy. Weakly depends on #86225.
Things done
proxychains
supportsandbox
innix.conf
on non-NixOS linux)nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
./result/bin/
)nix path-info -S
before and after)